Limelight Networks, Inc.

Netskope, Inc.

Netskpope, Inc.

Bradley B Harvell

Nils H McCarthy

Mohan I Kokal

Jason Eggleston

Michael M Gordon

Jason Lee Wolfe

Joseph DePalo

Nathan F Raciborski

Lee A Stafford

Gary S Baldus

A controlled content system for providing a controlled and contained environment that is remotely accessible is disclosed. A third-party application on the end user device is modified to allow certain sites and services to be mediated in a mid-link server. The app uses policies to know when to access the mid-link server for the controlled and contained environment. Policies can specify the type of processing performed on the mid-link server. Some embodiments support the app selectively using the mid-link server for mediated sites and services. A mediation switch of a mediated program of the third-party application determines whether the network packet traffic is mediated through a mid-link server using the policy cache. The mediation switch includes algorithms that determines the mediated network packet traffic based on one or more parameters.

Mediated traffic control through mid-link server

A remote access system for policy-controlled computing with a client device connected to a remote software environment is disclosed. The client device communicates with the remote software environment that securely runs applications. Restrictions for a local application that runs on the client device are enforced using a first plurality of policies. A mid-link server enforces restrictions on the remote software environment using a second plurality of policies. The second plurality of policies are updated for each client device, and corresponding enterprise, a country, and a present location of each of the client device of the plurality of client devices. A mirror function that emulates sensor input from the client device as if it is happening inside the remote software environment.

Policy-based remote access system with sensor input emulation

A controlled content system for providing a controlled and contained environment that is remotely accessible is disclosed. An application on the end user device is modified to allow certain sites and services to be mediated in a mid-link server. The app uses policies to know when to access the mid-link server for the controlled and contained environment. Policies can specify the type of processing performed on the mid-link server. Some embodiments support the app selectively using the mid-link server for mediated sites and services. A client spoofer at the mid-link server spoofs direct interaction with the certain sites and the services as if the end user device was directly interacting with the plurality of remote services.

Remote access to mediated content connection and control

A remote access system for policy-controlled computing with a client device connected to a remote software environment is disclosed. The client device communicates with the remote software environment that securely runs applications. Restrictions for a local application that runs on the client device are enforced using a first plurality of policies based on whether the client device is connected to a specific Virtual Private Network (VPN). A mid-link server enforces restrictions on the remote software environment using a second plurality of policies.

Policy-controlled computing based on connection of remote access system

A controlled content system for providing a controlled and contained environment that is remotely accessible is disclosed. A third party app on the end user device is modified to allow certain sites and services to be mediated in a mid-link server. The app uses policies to know when to access the mid-link server for the controlled and contained environment. Policies can specify the type of processing performed on the mid-link server. Some embodiments support the app selectively using the mid-link server for mediated sites and services.

Client software connection inspection and access control

A remote access system for policy-controlled computing with a client device connected to a remote software environment is disclosed. The client device communicates with the remote software environment that securely runs applications. Both the client device and the remote software environment are policy-controlled. User input and sensor information from the client device is passed to remote software environment to spoof local control.

Remotely accessed controlled contained environment

Provided are methods, systems and computer program products for improving TCP stream transmissions by establishing a transmission schedule and making modifications to the timing and/or rate at which data packets are transmitted based on a timing of acknowledgment signals received in response to transmitted data packets.

Strategically scheduling TCP stream transmissions

A method or system for transferring information during the domain name service (DNS) lookup to more effectively utilizing the content delivery network (CDN) is disclosed. Information gathered from DNS request is used to identify information on how to serve the content with a chosen IP address returned from the DNS lookup. The DNS server selects from a number of possible IP addresses after analyzing information from the DNS request and popularity of associated content. The different IP addresses will result in different edge servers providing content. An IP address could be provided for popular content in a way that will tend to populate more content caches from the pool of edge servers in one embodiment.

Scaled domain name service

A method of providing media at multiple bit rates using partial object caching may include receiving, from a first user device, a first request for a media object encoded at a first bit rate; providing the first portion of the media object to the first user device; and caching, in a partial object cache, the first portion of the media object. The method may additionally include receiving, from a second user device, a subsequent request for the media object encoded at the first bit rate; providing the first portion of the media object as retrieved from the partial object cache; and receiving a request for the media object encoded at a second bit rate. The method may further include modifying the request for the media object encoded at the second bit rate to instead request a second portion of the media object at the second bit rate.

Partial object caching

A method for handling content requests received in a CDN using an intermediate server may include maintaining a virtual file server that provides virtualized access to content in multiple POPs throughout the CDN, receiving a content request sent to the CDN, making a local request to the virtual file server for the content, where the specialized virtual file server may determine that the content is stored in a second POP that is remotely located from the first POP, and the specialized virtual file server may retrieve the content from the second POP and provide the content to the intermediate server as though it were stored locally in the first POP. The method may also include receiving the content from the specialized virtual file server, where the specialized virtual file server makes the requested content appear to be a locally-stored file to an operating system of the intermediate server.

Intermediate content processing for content delivery networks

Content delivery networks (CDNs) deliver content objects for others is disclosed. End user computers are directed to an edge server for delivery of a requested content object by a universal resource indicator (URI). When an edge server does not have a copy of the content object from the URI, information is successively passed to ancestor servers within a hierarchy until the content object is found. There can be different hierarchies designated for different URIs or times at which requests are received. Once the content object is located in the hierarchical chain, the content object is passed back down the chain to the edge server for delivery.

Content delivery network cache grouping

Techniques for modifying the performance of a transport layer protocol in response to a request for content are disclosed. A connection can be established between a content distribution server and an end user computer according to preconfigured parameters. When a request for content is received over the connection, the content distribution server can determine one or more parameters relating to the performance of the connection using information from the request. The content distribution server can modify the connection at the transport layer according to the one or more parameters. Thereafter, the transport layer can manage delivery of the requested content to the end user computer in accordance with the modified parameters. In various embodiments, the content distribution server includes a modified TCP protocol stack which adjusts timing, pacing, and buffer allocation associated with a connection in response to requests from an application-layer data source.

Conditional protocol control

One or more content delivery networks (CDNs) that deliver content objects for others is disclosed. Content is propagated to edge servers through hosting and/or caching. End user computers are directed to an edge server for delivery of a requested content object by a universal resource indicator (URI). When a particular edge server does not have a copy of the content object from the URI, information is passed to another server, the ancestor or parent server to find the content object. There can be different parents servers designated for different URIs. The parent server looks for the content object and if not found, will go to another server, the grandparent server, and so on up a hierarchy within the group. Eventually, the topmost server in the hierarchy goes to the origin server to find the content object. The origin server may be hosted in the CDN or at a content provider across the Internet. Once the content object is located in the hierarchical chain, the content object is passed back down the chain to the edge server for delivery. Optionally, the various servers in the chain may cache or host the content object as it is relayed.

An intermediate server for handling content requests received from edge servers in a Content Delivery Network (CDN) and accessing and processing content distributed throughout the CDN may include a port that receives a content request from an edge server in a same Point-of-Presence (POP) including a URI. The ICPS may also include a content processor communicatively coupled to the port and configured to perform a processing function on the requested content to produce processed content for delivery to the edge server. The ICPS may further include a CDN content interface that provides virtualized access to content files accessible using URIs throughout the CDN and configured to receive a portion of the requested content using the URI stored in a second POP, and provide the requested content to the content processor, wherein the requested content comprises the portion of the requested content.

Growing community of inventors

Chandler, AZ, United States of America

Bradley B Harvell